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Amendment tn*^^ al ^ CENTfiS-W^T?^ 

NOV 1 5 2007 

This hstmg of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Cjaims: 

1 1. (currently amended): A system for providing secure exchange of 

2 sensitive information with an implantable medical device, comprising: * 
a crypto key uniquely associated with an implantable medical device to 

encrypt sensitive information during a data exchange session; and 

an external source to securely obtain the crypto key over a secure 
connection from a secure key repository securely maintaining the crypto key, to 
encrypt the sensitive information using the crypto keynmd key, to store the 
sensitive information as encrypted data onto the implantable medical device, and 
to further store at least a part of th e sensiti v e in formation a* ..e ncrypted data nnt^ 
10 the implantable medical H»V ce over a s*r»r S connection 



3 
4 
5 
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1 2. (original): A system according to Claim 1, further comprising: 

2 a short range interface to logically define a secured area around the 



3 implantable medical device within which to securely obtain the crypto key; and 
* a long range interface to logically define a non-secured area extending 

5 beyond the secured area within which to exchange the encrypted data. 

1 3. (original): A system according to Claim 1, wherein the encrypted 

2 data is retrieved from the implantable medical device over a non-secure 
connection and the encrypted data is decrypted as the sensitive data using the 
crypto key. 



3 



1 4. (original): A system according to Claim 3, wherein the crypto key 

2 is securely retrieved over a secure connection from the secure key repository prior 

3 to decrypting the encrypted data. 
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1 5. (original): A system according to Claim 3, wherein the encrypted 

2 data is retrieved through long range telemetry. 



1 



6. (original): A system according to Claim 5, wherein the long range 
2 telemetry comprises radio frequency telemetry. 



Claim 7 (canceled). 



8 - (currently amended): A system according to Claim 7 Claim 1 . 

2 wherein the unencrypted data is securely retrieved from the implantable medical 

3 device over a secure connection. 

1 9. (original): A system according to Claim 1, wherein the crypto key 

2 is securely retrieved from the secure key repository through a programmer. 

10. (original): A system according to Claim 1, wherein the crypto key 
is maintained on the implantable medical device, and the crypto key is retrieved 



1 
2 

3 through short range telemetry 



1 11. (original): A system according to Claim 10, wherein the short 

2 range telemetry comprises inductive telemetry. 

1 12. (original): A system according to Claim 1, wherein the external 

2 source comprises at least one of a programmer and a repeater. 

1 13. (original): A system according to Claim 1, wherein the crypto key 

2 comprises an encryption key in accordance with the Advanced Encryption 

3 Standard. 

1 14. (currently amended): A method for providing secure exchange of 

2 sensitive information with an implantable medical device, comprising: 

3 defining a crypto key uniquely associated with an implantable medical 

4 device to encrypt sensitive information during a data exchange session; 
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securely obtaining the crypto key over a secure connection from a secure 
key repository securely maintaining the crypto key; [[and]] 

encrypting the sensitive information using the crypto key and storing the 
sensitive information as encrypted data onto the implantable medical device; and 

farther storing at least a part of the sensitive inaction as ungngrypj^ 
data onto the implantable medical device over a sgcure ggtign 



1 15. (original): A method according to Claim 14, further comprising: 

2 logically defining a secured area around the implantable medical device 

3 within which to securely obtain the crypto key; and 

4 logically defining a non-secured area extending beyond the secured area 

5 within which to exchange the encrypted data. 

1 16. (original): A method according to Claim 14, further comprising: 

2 retrieving the encrypted data from the implantable medical device over a 

3 non-secure connection; and 

4 decrypting the encrypted data as the sensitive data using the crypto key. 
1 17. 



(original): A method according to Claim 16, further comprising: 
securely retrieving the crypto key over a secure connection from the 
secure key repository prior to decrypting the encrypted data. - 



1 18. (original): A method according to Claim 16, further comprising: 

2 retrieving the encrypted data through long range telemetry. 

1 19. 



2 



(original): A method according to Claim 18, wherein the long 
range telemetry comprises radio frequency telemetry. 

1 Claim 20 (canceled). 

1 21. (currently amended): A method according to Claim 20 Oajm21, 

2 further comprising; 
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3 securely retrieving the unencrypted data from the implantable medical 

4 device over a secure connection. 

1 22. (original): A method according to Claim 14, wherein the crypto 

2 key is securely retrieved from the secure key repository through a programmer. 

1 23. (original): A method according to Claim 14, further comprising: 

2 maintaining the crypto key on the implantable medical device; and 

3 retrieving the crypto key through short range telemetry. 

1 24. (original): A method according to Claim 23, wherein the short 

2 range telemetry comprises inductive telemetry. 



1 

2 

1 
2 



25. (original): A method according to Claim 14, wherein the external 
source comprises at least one of a programmer and a repeater. 

26. (original): A method according to Claim 14, wherein the crypto 
key comprises an encryption key in accordance with the Advanced Encryption 

3 Standard. 

1 27. (currently amended): An apparatus for securely transacting a data 

2 exchange session with an implantable medical device, comprising: 
means for defining a crypto key uniquely associated with an implantable 

medical device to encrypt sensitive information during a data exchange session; 

means for securely obtaining the crypto key over a secure connection from 
a secure key repository securely maintaining the crypto key; [[and]] 

means for encrypting the sensitive information using the crypto key and 

8 means for storing the sensitive information as encrypted data onto the implantable 

9 medical device : and 

10 means for further storing at least a nart ojthe sensiti ve mfn^inn a « 

U ^rvpM data onto the implantable medical device over , seer, g^tion 
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1 28. (currently amended): An implantable medical device for securely 

2 maintaining sensitive information, comprising: 

3 a n implantable medical device, comprising: 

4 a memory to store sensitive information encrypted using a crypto 

5 key uniquely associated with an implantable medical device and at least a p art of 

6 the sensitive information a S unencryp ted H ata; an d 

a secure interface to provide access to the stored sensitive 

8 information exclusively over a secure connection. 

1 



7 



29. (currently amended): An method for securely maintaining sensitive 

2 information on an implantable medical device, comprising: 

3 storing sensitive information encrypted using a crypto key uniquely 

4 associated with an implantable medical device and at least * p arr feg g ^ e ;^ 

5 informatio n as unencrypted data : and 

6 providing access to the stored sensitive information exclusively over a 

7 secure connection. 

1 30. (currently amended): An apparatus for securely maintaining 

2 sensitive information on an implantable medical device, comprising: 

3 means for storing sensitive information encrypted using a crypto key 

4 uniquely associated with an implantable medical device and at least a p Mgfjhg 

5 sensitive information a* .™,> P crvpteri data; a „H 

6 means for providing access to the stored sensitive information exclusively 

7 over a secure connection. 



OARcsp 



PAGE 11/17 • RCVD AT 11/15/2007 8:16:45 PM [Eastern Standard Time) • SVR:USPTO-EFXRF-3/8 * DNIS:2738300 * CSID:2063813999 * DURATION <mm-ss):0648 



